Gemini CLI vulnerability allows hackers to execute hidden malicious commands (opens in new tab)

(arstechnica.com)

8 pointswitnessme11mo ago3 comments

3 comments

3 comments · 1 top-level

cedws11mo ago· 2 in thread

I’m considering containerising all of my development environment, and having Zed/VSCode work in the container via SSH. Obviously containers are not completely blast proof but it would give me peace of mind knowing that the LLM can’t go rogue and nuke my home dir.

witnessmeOP11mo ago

Did you try it? How was your experience?

cedws11mo ago

I did a little experiment but I probably need to write a script or tool to ease the friction.

If I want to work on a new project in Zed, assuming each project has its own container, I have to create a container with the mount, have it publish sshd on a random port, then invoke Zed or configure it to connect to that random port.

j / k navigate · click thread line to collapse